Cisco Firepower 4100 Series vs. Sophos Firewall

When we are asked by local partners which security equipment we use we always recommend our Cisco security products. The Firepower firewall is no exception and we can easily recommend this to others who need a fast, secure, and well built system that integrates well with all your existing hardware and software.

Incentivized

It is well-suited for small, medium, and large organizations looking for comprehensive cybersecurity protection. It will not only safeguard their network from cyberattacks but also provide them with many advanced features like deep packet inspection, centralized management, web filtering, application control, etc. in one place. It will help them optimize bandwidth and ensure continued connectivity.

Incentivized

• Policy management in the GUI. I'm old-school, and still create ACLs in the CLI, but using the GUI for this is very nice.
• Event monitoring and reporting is great, and you can get very granular when it comes to what information you are viewing.
• I really like the troubleshooting features that are built in, especially the packet tracer and the ability to generate and download a troubleshooting package to review or send to TAC.

• Web filtering. This allows us to monitor web usage and block certain categories from being access at the perimeter.
• Application Control. With application control we can block certain applications that get categorized from working accessing the Internet.
• Synchronized Security. When utilizing the Sophos Endpoint product you can use Synchronized Security to minimize Lateral Movement in a network. If a machine is shows a Red status you can auto-isolate it and it is unable to communicate with anything else on the network.

Incentivized

• When deployed as Firepower Threat Defense, configurations cannot be made within the device itself.
• Troubleshooting can be difficult if the Cisco Firepower 4100 Series firewall is managed by the Cisco Firepower Management Center.
• There are two operating systems in Cisco Firepower 4100 Series, firmware upgrade process will take a long time.

• If using Endpoint security and the Firewall it would be nice to have an easier back and forth between the portals rather than have two separate tabs open. Especially if using more than one in multiple locations.
• If dealing with different revisions options are moved around and sometimes in places that doesn't normally seem like they should be there.

Incentivized

It not easy to understand the different features it offers. Sometimes you need to spend a couple of minutes to implement a change or even open a ticket with cisco tac to figure it out. Once support is on the phone with you they know how to resolve problems. But it's not an intuitive tool

Incentivized

Because this is a user-friendly interface, and anyone can use it there are multiple articles and guidelines available, it has advanced-level security features. they provide VPN solutions all the features are very practical, SSID MAC-based authentications web control, Firewall rules segregation of the rules and policies, On-premises Active directory single sign-on feature is also available.

As we are all addicted to graphics-oriented interfaces for all our life products. Easy to manage and access as a good way of using anything

We switch to Palo Alto due the amount of tickets open with Cisco Firepower 4100 Series. It was taking a great amount of time for our engineers to fix problems. But it was a great tool when it was working as we were expecting. The fact it has a lot of instability on the releases was the deciding factor.

Incentivized

I was a big fan of Cisco ASA products, but when I saw all of the security feature differences between both firewalls, I moved to Sophos devices. Its sandbox, IPS, and many more features are really advanced. Cisco does not provide features like this.

Incentivized

• Quickly respond to incidents using vpn remote access
• VPN L2L used to establish connections with global providers
• Up to 2000+ vpn access without having performance issues
• Granular access with policy groups based on the AD user

Incentivized

• True UTM device.
• Very Active customer help for any help.
• Easy license and cost effective.
• Should [do] more work on logging and reporting.